CVE-2024-35959

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Fix mlx5e_priv_init() cleanup flow

The Linux kernel CVE team has assigned CVE-2024-35959 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024052019-CVE-2024-35959-6e06@gregkh/T

This vulnerability is evaluated with a Low severity impact because it only occurs within the cleanup path following a failed initialization of the Mellanox driver, requiring specialized Mellanox hardware or virtualized mlx5 devices to trigger. Exploitation requires local administrative privileges or simulated hardware fault conditions to force an initialization failure. The defect primarily produces lockdep diagnostic warnings on debug-enabled kernels rather than leading to arbitrary code execution or unprivileged elevation of privileges.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.